EmryZhang opened a new pull request, #436: URL: https://github.com/apache/casbin-rs/pull/436
Replace automatic publication with separate candidate and approved-release paths. RC tags export unsigned source prereleases without updating latest or publishing a crate. Final publication is manual and verifies the official source checksum, signature and file contents/modes before building the convenience crate; existing releases cannot be replaced. Add release instructions and crate checks for original/normalized manifests, dependencies/features, legal files and every declared included source/fixture. Pin shared conformance inputs and bind benchmark results to the workflow run's PR, head SHA and repository before posting bounded, escaped output. Validation: 22 Python release-safety tests, 9 mocked benchmark binding/escaping checks, workflow YAML review, actual cargo package build and complete crate-content comparison. Network/signature fixture mocks do not establish real signatures or release approval. The RM must verify actual project/IPMC approval and channel permissions. Depends on the source-header preparation branch. The combined Rust matrix passed both runtimes, all-targets strict Clippy, formatting and WASM checks. Merge and release approval remain separate stages. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
